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(57) Abstract 

A system with a RAID controller (20) connected to a plurality of hosts (A-E), and having a storage area configurable as a plurality 
of logical units (0-4). The RAID controller (20) stores in an associated memory a table of access right for the hosts (A-E) to the logical 
units (0-4). Updates can be provided and additional material can be provided in new memory space that is subsequently made available 
to the various hosts (A-E) by providing updated access rights that include the new space. In one embodiment, the present invention also 
maps the logical unit number (0-4) from that requested by the host (A-E) to an actual number used in the RAID subsystem. 
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provided in new memory space that is subsequently made available to the various hosts 
by providing updated access rights that include'the new space. 

In one embodiment, the present invention also maps the logical unit 
number from that requested by the host to an actual number used in the RAID subsystem. 
For example, multiple hosts may request logical unit number zero (LUNO), and other than 
the first host, they may be mapped to a different logical unit, such as LUN5, LUN8, etc. 

For a further understanding of the nature and advantages of the invention, 
reference should be made to the following description taken in conjunction with the 
accompanying drawings. 
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BRIEF DESCRIPTION OF THE DRAWINGS 
Fig. 1 is a block diagram of a SAN network including a RAID controller 
according to the invention. 

Fig. 2 is a flowchart illustrating the checking of access rights. 
15 * Fig. 3 is a block diagram illustrating two redundant RAID controllers. 

DESCRIPTION OF THE SPECIFIC EMBODIMENTS 
The invention allows the RAID controller user to allocate access to the 
storage area at the RAID subsystem level. Thus, a PC-NT host which will want to take 
20 control of everything it is connected to will only know about a designated portion of the 
memory space. The invention is particularly advantageous for a fast fibre optic network. 
In particular, previous network systems typically had a dedicated server that would 
control access to the memory substem. With faster links, this limits the access speed, and 
the present invention allows the elimination of this intermediate server. 
25 Fig. 1 shows a network 10 connected to a number of host computers A-E. 

Also shown is a separate server 12, which may itself be connected to a number of 
separate hosts 14, 16, and 18. A RAID controller 20 is also connected to the network. 

RAID controller 20 is shown as accessing multiple logical unit numbers 
0-4. Illustrated below each logical unit number is an example of which hosts are granted 
30 access to that LUN. 

The network in Fig. 1 is preferably a fibre network, but could be any other 
type of network or any switching or shared bus. For example, it could be a SCSI bus. 
The RAID controller of Fig. 1 is shown at a logical level, and could be two redundant 
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LOGICAL UNIT MAPPING IN A STORAGE AREA NETWORK 

(SAN) ENVIRONMENT 

CROSS-REFERENCES TO RELATED APPLICATIONS 
This application claims priority from U.S. provisional application no. 

60/108,461 filed on November 14, 1998 and having the same title. The contents of this 

provisional application are incorporated herein by reference. 

BACKGROUND OF THE INVENTION 
The present invention relates to RAID (redundant array of independent 
disks) systems in a storage area network (SAN). 

In one typical RAID configuration, a RAID controller is connected to an 
array of disk drives. The other side of the RAID controller connects to multiple hosts 
through an intermediate server. In a SAN environment, the intermediate server is 
eliminated, and the RAID controller is itself on the SAN network. 

In such a network, a PC-NT host would typically try to take control of all 
memory spaces to which it is connected. In addition, if the RAID memory was to be used 
as the boot memory, multiple PCs would want to use the same logical unit (LUN) address 
for booting. It would be desirable to have a RAID controller which can connect into an 
SAN network and handle such operations transparent to the PCs on the network. 

SUMMARY OF THE INVENTION 

The present invention provides a system with a RAID controller connected 
to a plurality of homogenous or heterogeneous hosts, and having a storage area 
configurable as a plurality of logical units. The RAID controller stores in an associated 
memory a table of access rights for the hosts to the logical units. 

Preferably, a default setting is that a host does not have any access to the 
logical units of the RAID subsystem. An operator can then program the RAID controller 
to grant the desired amount of access to a particular host. Logical unit areas can be 
reserved to add new hosts, for instance. In addition, new space can be provided to 
existing hosts dynamically without affecting operations in logical unit space already 
accessible by the particular host. Updates can be provided and additional material can be 
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RAID controllers as shown in Fig. 3. Each RAID controller can be connected to two 
channels to the host, channels 0 and 1. 

RAID controllers must be able to supply common shared storage in both a 
heterogeneous and homogeneous networked environment without additional software 

5 required on the host systems to manage access to the units. The RAID controller must be 
able to partition the storage into logical units that can be presented to the hosts. This 
logical unit is a grouping of memory storage for which there is some method for mapping 
the access known by the RAID controller. It is independent of the actual physical storage 
media being used. For the RAID controller to provide the common storage in a SAN 

10 environment, it must be capable of limiting access to the logical units on a host by host 
basis. 

The RAID controller software provides a method for controlling the access 
of the logical units on a host by host basis. It provides the user the capability of 
managing the logical units and limiting access. The user enters in the unique name or 

1 5 identifier for a specific host that can be obtained by the RAID controller on the network. 
The user then selects which logical units that host can be allowed to access. This 
information is maintained in a table in the controller's memory when the code is running, 
allowing the changes to be implemented dynamically. It is also saved in some form of 
memory storage (flash, EEPROM, NVRAM, disk, etc.) so that it is persistent across 

20 reboots, power failures, etc. A copy is also sent to all of the controller's failover partners 
in a redundant configuration to maintain access across failures. 

The controller software allows the logical units to be accessible to any 
combination of hosts. The user can enable access by none, one, or any number of hosts as 
required. Because the controller manages the storage and access to it, the hosts on the 

25 SAN do not need to communicate with each other, or even know other hosts are on the 
network. 

In addition to controlling whether or not the logical unit is accessible by a 
host, the user can also limit the host access to the logical unit to read only. This allows 
the user to set up the logical unit as shared by several selected hosts and specify which of 
30 those hosts can update the data and which can only view the data. 

When the controller receives a request from a host for a logical unit, it 
checks the access table to determine if the host is allowed access. If the host is not 
allowed access, the controller reports back to the host that the logical unit is not 
connected. If the host is allowed access, the request is processed. 

3 
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The user can access the RAID controller for configuration, etc., through a 
serial port connected to a terminal (console) or PC. Alternately, a PC connected through 
an Ethernet network could be used, or any other access method. 

The flowchart of Fig. 2 illustrates how a host request 30 for access to the 
5 storage space is handled. The RAID controller first extracts from the host request the 
logical unit the host is trying to access and the host ID (step 32). The logical unit 
requested is compared to a table to determine if the host will be granted access rights 
(step 34). 

If no access rights are provided, a response is sent to the host request 
1 0 indicating that the logical unit requested is not connected (step 36). If access is allowed, 
the request is serviced (step 38). A response is sent back to the host in either case (step 
40). 

The invention provides a high degree of configuration flexibility. For 
example, a user can configure the system to tell a particular host that there is not any 
1 5 logical unit available, fooling the host into thinking it is simply not connected. If multiple 
hosts are sharing a common storage, they can be granted the same access rights. The 
storage can be added to in an area where no access is provided, and then after the 
additions have been checked, access rights to the new storage can be dynamically added. 
Similarly, a portion can be dynamically removed from the access rights, modified, then 
access can be provided again. In addition to dynamically bringing storage in and out, 
hosts can be dynamically brought in and out by eliminating and adding access rights 
dynamically. 

SAN volume mapping to specific host systems can be used to isolate 
storage to specific hosts systems for performance, management, and data protection. 
25 Zones or host mappings support functions and business needs similar to 

how a traditional network can be subdivided into sub-nets. Performance, data protection, 
security, fire-walling, and different application requirements will drive zoning and host to 
LUN mapping. 

Zoning can be accomplished via switches as well as via RAID devices 
30 using either port to port mappings, or LUN to World Wide Port Name mapping. 

The present invention thus provides the ability to dynamically modify 
LUN access on the fly. Typically, this may be done to add access and expand storage 
without rebooting. Where a mirrored set is provided, both are written to. 
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The present invention can also provide limited access to a LUN, as 
opposed to total or no access. For example, read only access could be provided. This 
would be useful, for instance, to allow another host to do backup at the same time that a 
LUN is also accessible by other hosts. The backup server would be given read only 

5 access, and thus there is less chance of conflicts with other hosts attempting to read and 
write the same area. By granting a backup server read only access for backing up, it need 
only be given the access during the backup time and thus the backup server doesn't have 
to have access to the same memory all the time. This eliminates the need to use one of 
the hosts using the storage for backup purposes. 

1 0 In addition, where a RAID server is used for an internet company, read 

only access could be provided. Another portion of the memory could be reserved for 
writing updates, which could then be subsequently provided to users by updating their 
access rights. 

A customer can communicate with the RAID controller through a console 
15 connected to it or through a GUI interface from host. Both are preferably password 
protected. 

The 6300 and 6700 both connect to hosts over a fibre channel interface. 
The 6300 described below is an example RAID controller using SCSI interfaces to a 
RAID array of disk drives that form the LUNs. The user manuals for the 6300 and 6700 
20 describe the operation in more detail, and are available from MT1 Technology Corp. The 
6300 has a default condition where all hosts have total access. The 6700 is a RAID 
controller using fibre interfaces to the RAID disk drives. The 6700 has a default 
condition where no host has access. Any default condition could be used for any system 
configuration. 

25 The port names set forth conform to IEEE standard 802-1990 for naming. 

Configuring LUN Affinity 

The RAID controllers support defining which hosts on the Fibre Channel 
Arbitrated Loop have access to which LUNs. Each LUN can be set up to be accessed by 
30 any number of hosts. The hosts are defined by their worldwide unique port name. On the 
6700 no host has access to any LUN unless there is an entry in the table. On the 6300 all 
hosts have access to all LUNs if no table exists. Currently this access must be set up 
through the serial console port. On the 6700 the changes will have effect the next time 
the host attempts to access a LUN that has been changed. 

5 
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6700 Host Access Tahle 

1 • At the serial console port, type gladMenu to the main menu. 
2. Select 1 to get to the Field Service menu. 
5 3. Select 1 to get to the Configuration menu. 

4. Select 6 to display the Host Access Table. 

5. Select 7 to edit the Host Access Table. 

6. Enter P to add or delete a host, or L to edit the LUN access for a host 
already in the table, at the prompt. If you select L, go to step 9. 

10 7. If you selected P, enter D to delete a host, or A to add a host, at the 

prompt. 

8. Select either channel 0 or 1 at the prompt, based upon which port the LUN 
is assigned to. .. 

9. Enter the 8 byte worldwide unique name of the host. 

1 0. Enter a 1 2 byte text description to identify the host. 

11. For each LUN displayed as disabled that you want to enable type t. 



15 



Sample Host Access Entry r>ic r i„ y . 

Enter channel (0 or 1): 0 
20 Hosts currently logged in: 

20:00:00:e0:8b:00:72:03 

Port name: 20:00:00:e0:8b:00:72:03 

Hostname: System One 

LUN 0 is enabled 
25 LUN lis disabled 

LUN 2 is enabled 

LUN 3 is disabled 

LUN 4 is disabled 

30 6300 Host A ccess Tahle 

1 • At the serial console port, type gladMenu to get to the main menu. 

2. Select 1 to get to the Field Service menu. 

3. Select 7 to get to the FC LUN MAP menu. 
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4. If you need the port information for the nodes on the FCAL, select 5 to 
display the logged-in hosts. 

5. Select 1 to display the LUN map. 

6. Select 2 to remove a host from the LUN map. 

7. Select 3 to add a host to the LUN map. 

8. After making changes, select 4 to save LUN map. 

9. Select 6 to remove the LUN map to start from scratch. WARNING: All 
the data in the LUN MAP file will be destroyed. 

10. Select 7 to get a copy of partner board's LUN MAP onto this board. 
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Sample Logged In Hosts Display : 

Host Map 
ALPA Node Name 
1 100000a0fl000132 
15 2 100000b2a0001094 

ef 10000098bf221032 

Sample LUN MAP Display : 
LUN Map 

20 ALPA Host LUN RAID LUN 

I 0 0 

II 1 
1 2 2 

.1 3 3 

25 2.0 0 

ef 0 0 

ef 1 4 

ef 2 5 

ef 3 6 
30 RAID LUN is the actual LUN number assigned in the 6300 array. 

Host LUN is the LUN number that is presented to the host for that RAID 

LUN. 
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As will be understood by those of skill in the art, the present invention may be 
embodied in other specific forms without departing from the essential characteristics 
thereof. Accordingly, the foregoing description is intended to be illustrative, but not 
limiting, of the scope of the invention which is set forth in the following claims. 
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WHAT IS CLAIMED IS: 

1 1. A memory storage system comprising: 

2 a RAID controller configured to connect to a plurality of hosts; 

3 a storage area configurable as a plurality of logical units; and 

4 a memory, connected to said RAID controller, for storing access rights of 

5 said hosts to said logical units. 

1 2. The system of claim 1 wherein said RAID controller is configured to 

2 dynamically change said access rights in said memory. 

1 3. The system of claim 1 wherein said memory stores default access rights 

2 granting no access. 

1 4. The system of claim 1 further comprising a fibre channel network 

2 connecting said memory storage system to said plurality of hosts. 

1 5. The system of claim 1 wherein said memory further stores a remapping 

2 of logical units, so that multiple hosts can access said memory storage system specifying 

3 an identical logical unit, and be directed to different logical units. 

1 6. The system of claim 1 wherein a grouping of memory storage 

2 corresponding to logical units assigned to a particular host is transparent to said particular 

3 host. 

1 7. The system of claim 1 further comprising a table in said memory, said 

2 table storing both said access rights and a mapping to translated logical units. 

1 8. A memory storage system comprising: 

2 a RAID controller configured to connect to a plurality of hosts; 

3 a storage area configurable as a plurality of logical units; and 

4 a memory, connected to said RAID controller, for storing access rights of 

5 said hosts to said logical units; 

6 said RAID controller being configured to dynamically change said access 

7 rights in said memory; 

8 said memory storing default access rights granting no access; and 
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9 said memory further storing a remapping of logical units, so that multiple 

10 hosts can access said memory storage system specifying an identical logical unit, and be 

11 directed to different logical units. 

1 9. The system of claim 8 further comprising a fibre channel network 

2 connecting said memory storage system to said plurality of hosts. 

1 10. A method for operating a memory storage system comprising: 

2 connecting a RAID controller to a plurality of hosts; 

3 said RAID controller being connected to a storage area configurable as a 

4 plurality of logical units; and 

5 storing access rights of said hosts to said logical units. 



1 

2 access rights. 



1 1. The method of claim 10 further comprising dynamically altering said 



1 12. The method of claim 1 1 wherein said dynamically altering comprises 

2 adding access rights to a particular host without affecting existing access rights of said 

3 particular host. 

1 13. The method of claim 10 further comprising storing a default of no 

2 access rights prior to granting access rights to a host. 

1 14. The method of claim 10 further comprising reserving a designated 

2 plurality of logical units for future hosts to be added, and not granting existing hosts 

3 access to said designated plurality of logical units. 

1 1 5. A method for operating a memory storage system comprising: 

2 connecting a RAID controller to a plurality of hosts; 

3 said RAID controller being connected to a storage area configurable as a 

4 plurality of logical units; 

5 storing access rights of said hosts to said logical units; 

6 dynamically altering said access rights, wherein said dynamically altering 

7 comprises adding access rights to a particular host without affecting existing access rights 

8 of said particular host; and 
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9 storing a default of no access rights prior to granting access rights to a 

10 host. 

1 16. The method of claim 1 5 further comprising reserving a designated 

2 plurality of logical units for future hosts to be added, and not granting existing hosts 

3 access to said designated plurality of logical units. 
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